Connect your AI (MCP)
Permissions
The things you can let an AI app do, and how to change them.
On this page
When you connect an AI app, cnvrtlocal shows a page asking you to allow access. You choose a workspace and what the app may do.
The permissions
| Permission | What you see | Lets the AI |
|---|---|---|
sites:read | See your workspace (always on) | Read your businesses, sites, pages, blog posts, images and analytics. See approvals, your plan and credits left. |
sites:write | Create drafts | Build sites, add pages, edit section text and list items, add, move, hide and remove sections, write blog posts and update business details. Saved as drafts. Changes to a live site need your approval. |
media:write | Add images | Upload images from a link, make new ones with AI, place an image in a section, and include images when adding a section. On by default for new connections. |
publish:request | Ask to publish | Ask to publish a site or connect a domain. Both only create a request for you to approve. |
leads:read | Read leads | Read and export your leads. Off by default. |
Giving an app Ask to publish doesn't let it publish. It can only ask. A person still has to approve. See Approvals.
Add images
Add images covers upload_image, generate_image, set_section_image, and passing images when adding a section. Listing the images on a site (list_images) only needs See your workspace, and adding, moving, hiding or removing sections needs Create drafts.
It's ticked by default for new connections. Images from a link must be https://, up to 10 MB, and PNG, JPEG, WebP, GIF or AVIF (no SVG). AI-made images use your AI credits. See Images.
Apps you connected before this permission existed don't have it, and the image tools tell you to reconnect. To add it, disconnect the app and connect it again (see below).
One workspace per connection
Each connection is for a single workspace. The AI can't see your other workspaces.
If someone is removed from a workspace, their AI apps lose access to it too.
Change permissions
Changes take effect straight away. To change what an app can do, disconnect it and connect again. Go to Settings, then Integrations, then Connected AI apps and choose Revoke, then reconnect and choose new permissions.
Why leads are off by default
Leads contain people's names and contact details. Only turn on Read leads for apps you trust with that.